SmartLingo identity, data, media, and AI foundation report

Completed today

Exactly five tasks are complete: Clerk email-code identity, the D1 core model, private R2 media, the unified AI gateway, and infrastructure-isolation tests all have code, configuration, and production-domain evidence. The first user and four test users completed real Safari sign-in; test2, test3, and test4 established single-level attribution through test1's link, with no signup points. The production referral-entry 500 was fixed and covered by a runtime regression test.

Validation record

• Migration 0018 adds original bilingual exercises, versioned progress, integer-cent order constraints, a single-use first-payment discount, and direct-introducer rewards backed only by paid platform subscriptions; migrations are repeatable
• Seven private-media purposes enforce content signatures, size, ownership, and scope; class covers, voice practice, and chat attachments have authorized reads and retry-safe deletion
• The AI gateway unifies public Guru, listening, speaking, writing, and safety review with keyed subject hashes, atomic limits, full-response timeouts, auditing, and fallbacks that never impersonate a human teacher
• The Clerk production app, dedicated domain, and SSL are active; signup does not require setting a password, while users may add one later from their account
• The first user and four test users completed real Safari sign-in; the first user has no incorrect introducer, test1 has three direct introductions, and every signup reward balance remains zero
• Valid referral codes once returned a production 500 because code appended a cookie to immutable Response.redirect() headers; the route now constructs the 302, Location, and secure cookie together and is covered by a real Worker-route regression test
• Profile and avatar, private class creation, a public Community topic and reply, direct messages and Guru polish, direct and group Live Chat, an attachment, unread notifications, public Guru, and the signed-in voice entry completed real production-domain acceptance
• Chinese and English Home, Classes, Programs, sign-in, Community, Messages, Live Chat, Guru, Project calendar, daily task, and report surfaces completed 110 runtime measurements across all five release viewports with no horizontal overflow, clipping, overlap, meaningful ellipsis, or floating-shortcut collision
• The full gate includes every D1 migration, all tests, TypeScript, ESLint, the vinext production build, artifact validation, and client sensitive-data scanning; any failure blocks publishing
• Apex and WWW Sites domain, provider, and SSL states are active; production HTTPS pages and a real AI answer passed acceptance, with no application errors after deployment
• The same accepted revision is synchronized to GitHub main; Sites v5, the GitHub commit, and the production domain form the first three-way verified release record

Rollback boundary

The production domain now serves Sites; if the current build fails, it can return to the prior successful Sites version and matching source revision. Live charging, Stripe Connect, refunds, disputes, and payment webhooks remain off.

Next delivery day

Continue with the five August 2 tasks: the ten-language catalog, goal and level onboarding, optional placement checks, the stage and unit map, and learning-path integrity tests.